CVE-2024-7598

Publication date 20 March 2025

Last updated 26 March 2025

Ubuntu priority

Medium

Why this priority?

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.

Read the notes from the security team

Status

Package Ubuntu Release Status
kubernetes 25.04 plucky Not in release
24.10 oracular
Needs evaluation
24.04 LTS noble
Needs evaluation
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation

Notes

leosilva

kubernates is in fact a kubernetes installer that calls snap, not the package it self.